Re: [saml-dev] IDP clock skew issue

["Cantor, Scott" <cantor.2@osu.edu>]

On 4/7/14, 3:43 PM, "Lucas, Mike" <Mike.Lucas@gwl.ca> wrote:

>I also did not understand the question. Usually the NotBefore and the
>NotOnOrAfter will be set by the issuer to some reasonable value so that a
>small amount of clock skew will not cause problems.

It's the recipient who applies skew, not the sender. If the sender wants
to, they can, but they definitely are not obligated to.

-- Scott